...
If the web application need to check if a user is approved for an assurance profile the application needs to check approved assurance profiles for both the user and the used Indentity Provider as described in the bullit list in this document. Please note that this approach only chekes that the Identity Provider and the user fulfills the cheked assurance profile. To check that the credetials used to log in fulfills the assurance profile is more advanced.